$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/4A27AA70305B11F08E81A33BC4F9AE02.roa File: 4A27AA70305B11F08E81A33BC4F9AE02.roa (raw, json) Hash identifier: qzfl+Dr8Jhg7AA1ZKFSwkFzl0gx3OGghCATWZeWsNuQ= Subject key identifier: 8B:3F:27:1C:39:D2:91:D5:26:54:A7:4F:8B:68:F6:0D:09:4C:CD:AE Certificate issuer: /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Certificate serial: 0489 Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/4A27AA70305B11F08E81A33BC4F9AE02.roa Signing time: Mon 25 May 2026 01:34:59 +0000 ROA not before: Mon 25 May 2026 01:34:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 32043 IP address blocks: 43.243.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Jun 2026 00:46:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1161 (0x489) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178AF2, serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Validity Not Before: May 25 01:34:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a13a743-ffdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c9:06:39:f6:25:cb:96:24:46:4f:49:ca:ec: 5d:9f:53:89:31:fb:a6:ff:0c:c8:29:8b:8a:cc:c2: 86:37:48:61:52:5c:86:bf:88:b3:85:c2:c5:d6:e8: 50:0a:ec:60:5c:de:9a:17:e8:0d:50:e7:9c:6b:3a: 84:3e:4e:7c:c6:cc:5c:e2:57:68:67:e7:2f:81:a2: a8:c5:b6:bd:94:ba:58:b1:02:0a:45:de:ef:96:0b: 04:df:c8:de:1e:af:31:69:a8:c5:f6:35:38:17:7c: 17:64:0d:b3:dc:4f:1f:76:00:6c:58:68:69:bb:12: 30:f4:8f:f6:c3:31:9e:06:5f:eb:ed:59:52:b7:03: 86:43:59:5f:0f:48:b3:af:ac:5f:91:86:cd:d2:48: b1:f4:07:f6:c5:76:b3:91:37:12:f6:9b:bd:9f:cd: bb:b6:c5:06:c0:f0:86:e6:d7:bf:ea:2a:da:5f:61: b5:cc:2e:7d:de:c0:5e:cd:1b:d7:dd:65:d2:97:36: aa:b3:d3:c6:69:67:fb:65:5b:d5:9c:04:92:54:f2: 2c:ed:7c:6a:a2:3f:52:59:af:06:49:fe:74:44:f1: ef:81:ac:56:2e:79:09:61:5f:e3:f4:dd:56:09:e9: f1:96:c5:41:ed:0d:be:c2:58:ae:4b:bd:29:7d:52: da:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:3F:27:1C:39:D2:91:D5:26:54:A7:4F:8B:68:F6:0D:09:4C:CD:AE X509v3 Authority Key Identifier: keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/4A27AA70305B11F08E81A33BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.243.194.0/24 Signature Algorithm: sha256WithRSAEncryption 85:56:26:ed:31:90:a1:d2:e6:c6:e2:a0:e4:d8:27:0c:fa:2f: 50:32:6e:5f:bc:b7:67:c6:83:26:47:ae:f2:f0:7b:a9:a1:b4: 61:f4:f7:44:e4:05:c6:d3:27:ab:41:b1:5f:cf:dc:99:bb:31: dc:1e:53:3c:2d:5a:8b:a4:d1:ba:0b:c3:d7:37:1b:7b:76:0a: 71:69:f9:c3:be:d8:1f:b0:cc:32:9a:5d:75:54:dc:6e:1f:d4: 8d:09:29:22:a5:af:06:5f:34:a2:b1:1a:45:3b:db:6c:69:f2: eb:b4:92:e4:3a:81:5b:e9:dc:dc:55:83:41:3d:83:cc:80:81: 06:78:ef:56:6d:1a:91:20:64:3e:ee:d5:04:da:9c:38:d4:ad: e7:9e:6a:3e:ec:a4:31:d3:1d:d2:46:92:36:cc:ee:2e:ed:85: 5c:2d:1f:dc:f0:5e:b3:0a:50:4f:e1:1e:96:bb:5a:43:ee:b4: 9e:6f:84:69:86:76:b3:cb:e2:7d:b0:28:7f:f1:27:8a:e4:3d: 61:31:f4:9e:87:53:cd:fd:1b:bd:74:e5:e7:d1:c7:51:10:f6: 11:87:ca:dc:d3:78:84:e3:f7:87:fa:79:95:29:b2:54:02:40: 32:7e:26:b3:42:5a:7b:b5:92:f0:a0:c5:6c:73:f5:19:4f:7c: bf:f4:89:4a -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhBRjIxMTAvBgNVBAUTKDEwMDVDQ0Q1RTE4MjMwRkJBOUFERDNEMjdGODVEQTM4 RjEzRTQxNzIwHhcNMjYwNTI1MDEzNDU5WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTEzYTc0My1mZmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0skGOfYly5YkRk9Jyuxdn1OJMfum/wzIKYuKzMKGN0hhUlyGv4izhcLF1uhQ CuxgXN6aF+gNUOecazqEPk58xsxc4ldoZ+cvgaKoxba9lLpYsQIKRd7vlgsE38je Hq8xaajF9jU4F3wXZA2z3E8fdgBsWGhpuxIw9I/2wzGeBl/r7VlStwOGQ1lfD0iz r6xfkYbN0kix9Af2xXazkTcS9pu9n827tsUGwPCG5te/6iraX2G1zC593sBezRvX 3WXSlzaqs9PGaWf7ZVvVnASSVPIs7Xxqoj9SWa8GSf50RPHvgaxWLnkJYV/j9N1W CenxlsVB7Q2+wliuS70pfVLarQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIs/Jxw5 0pHVJlSnT4to9g0JTM2uMB8GA1UdIwQYMBaAFBAFzNXhgjD7qa3T0n+F2jjxPkFy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEFGMi83M0M4ODc5MkUw NjcxMUVDQjlEMkZGODFDNEY5QUUwMi9FQVhNMWVHQ01QdXByZFBTZjRYYU9QRS1R WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VBWE0xZUdDTVB1cHJkUFNmNFhhT1BFLVFYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzhBRjIvNzNDODg3OTJFMDY3MTFFQ0I5RDJGRjgxQzRGOUFFMDIvNEEyN0FBNzAz MDVCMTFGMDhFODFBMzNCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK/PCMA0GCSqGSIb3DQEBCwUAA4IBAQCFVibtMZCh0ubG4qDk2CcM +i9QMm5fvLdnxoMmR67y8HupobRh9PdE5AXG0yerQbFfz9yZuzHcHlM8LVqLpNG6 C8PXNxt7dgpxafnDvtgfsMwyml11VNxuH9SNCSkipa8GXzSisRpFO9tsafLrtJLk OoFb6dzcVYNBPYPMgIEGeO9WbRqRIGQ+7tUE2pw41K3nnmo+7KQx0x3SRpI2zO4u 7YVcLR/c8F6zClBP4R6Wu1pD7rSeb4Rphnazy+J9sCh/8SeK5D1hMfSeh1PN/Ru9 dOXn0cdREPYRh8rc03iE4/eH+nmVKbJUAkAyfiazQlp7tZLwoMVsc/UZT3y/9IlK -----END CERTIFICATE-----Generated at Tue Jun 9 08:10:00 2026 by rpki-client